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IN THE CLAIMS 
Amended claims follow: 

1 . (Currently Amended) A removable physical media bearing a computer program 
operable to control a computer to detectfjmgj] malware by performing the steps of: 

booting said computer with a non-installed operating system read from said 
removable physical media instead of an installed operating system stored on said 
computer; 

loading network support code for said computer read from said removable 
physical media; 

downloading from a remote computer one or more malware detection files; 

[[and]] 

performing malware detection upon said computer using said one or more 
malware detection files ; and 

( - ;!•; shimj - secun , v rk .connect to s I rem >t< 01 ? > 

wherein a firewall computer disposed between said computer and said remote 
computer is operable to block a connection between said computer and said remote 
computer other than said secur e network connection: 

wherein said network support code is used to enable said computer to establish 
said secure network connection vi a said n u-waH computer to ^ > < jj m u lomputtr . 

2. (Original) A removable physical media as claimed in claim 1, wherein said one or 
more malware detection files include at least one of: 

malware definition data containing data characteristic of malware to be detected; 
a malware detecting engine operable to control said computer to perform said 
malware detection; 

a malware application shell; and 

malware detection option settings operable to confi gure optional settings of said 
malware detection. 
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3. (Original) A removable physical media as claimed in claim L wherein said steps 
further comprise loading security management code operable to contra! said 
downloading. 

4. (Cancelled) 

5. (Cancelled) 

6. (Cancelled) 

7. (Original ) A removable physical media as claimed in claim 1, wherein said 
removable physical media is one of: 

an optical disk; 

a floppy disk; 

a memory card; and 

a removable disk drive. 

8. (Original) A removable physical media as claimed in claim I , wherein malware to 
be detected includes one or more of: 

a computer virus; 

a computer Trojan; 

a computer worm; 

a banned computer application; 

a data file associated with a malware file; and 

configuration settings of said computer associated with a malware file. 

9. (Currently Amended) A method of detecting malware upon a compute!; said 
method comprising!! the steps of]]: 

booting said computer with a non-installed operating system read from a 
removable physical media instead of an installed operating system stored on said 
computer; 
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loading network support code for said computer read from said removable 
physical media; 

downloading from a remote computer one or more ma! ware detection files; 

[[and]] 

performing ma! ware detection upon said computer using said one or more 
malware detection files; and 

estabjis se i t n i 1 1 > ij % > 1 ; ej 

wherein a firewall disposed between said computer and said remote computer is 
rablejojiio t m< ebon b t < - 1' 1 . t t j t e id said )ie_conipi!tt ther 
than said secure netAyo rk connection; 

wherein said network support code ,s used to enable said a>mpu?ef to establish 
said secure network connection via said firewall to said remote computer . 

1 0. (Original) A method as claimed in claim 9, wherein said one or more malware 
detection files include at least one of: 

malware definition data containing data characteristic of malware to be detected; 
a malware detecting engine operable to control said computer to perform said 
malware detection; 

a malware application shell; and 

malware detection option settings operable to configure optional settings of said 
malware detection. 

1 1 . (Original) A method as claimed in claim 9, comprising loading security 
management code operable to control said downloading. 

12. (Cancelled) 

13. (Cancelled) 



14. (Cancelled) 
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1 5. (Original) A method as claimed in claim 9, wherein said removable physical 
media is one of. 

an optical disk; 

a floppy disk; 

a memory card, and 

a removable disk drive. 

16. (Original) A method as claimed in claim 9, wherein malware to be detected 
includes one or more of: 

a computer virus; 

a computer Trojan; 

a computer worm; 

a banned computer application; 

a data trie associated with a malware file; and 

configuration settings of said computer associated with a malware file. 

17. (Currently Amended) A computer operable to detect malware upon said 
computer , said computer comprising a processor configured to [[by]] perform [[ing]] the 
steps of: 

booting said computer with a non-installed operating system read from a 
removable physical media instead of an installed operating system stored on said 
computer; 

loading network support code for said computer read from said removable 
physical media; 

downloading from a remote computer one or more malware detection tiles; 

[[and]] 

performing malware detection upon said computer using said one or more 
malware detection files ; and 
establishing a^ 
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< ies i ri • = -s 0 con < , )Oiedjx e 1 > I m utei id san mojk 
comp uter is operable to block a connection between said compute <md am remote 
CQO^gtel.pther thMSAy..sgcur> t action, 

wherein said network support code is used to enable said computer to establish 
eviej_< or] mecl i i said fire wall mpute; d rerno u mputer 

18. (Original ) A computer as claimed in claim 1 7, wherein said one or more malware 
detection files include at least one of: 

malware definition data containing data characteristic of malware to be detected, 
a maiware detecti ng engine operable to control said computer to perform said 
malware detection; 

a malware application shell; and 

malware detection option settings operable to configure optional settings of said 
malware detecii on . 

19. (Original) A computer as claimed in claim 17, wherein said steps further comprise 
loading security management code operable to control said downloading. 

20. (Cancelled) 

21. (Cancelled) 

22. (Cancelled) 

23. (Original) A computer as claimed in claim 17, wherein said removable physical 
media is one of; 

an optical disk, 

a floppy disk; 

a mem ory card; and 

a removable disk dri ve. 
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24. (Original) A computer as claimed in claim 17, wherein malware to be detected 
includes one or more of: 

a computer virus, 

a computer Trojan; 

a computer worm; 

a banned computer application; 

a data file associated with a malware file; and 

configuration settings of said computer associated with a malware file. 

25. (Currently Amended) A server computer connected by a network link to a 
computer detecting maiware upon said computer, said server computer comprising a 
processor configured to [[by]] performing]] the steps of: 

booting said comput e r with a non - install e d op e rating syst e m read from a 
r e movabl e phys i cal ■me d i a - i n s t e ad ■■■■ of -an ~m -s- t al le d ■ op e rat i ng ~ s y stem stor e d on said 

l oading - -n^weries«ppeft-eode for sai d comput e r re mt4k>m-sai d removable 
physical m e dia; 

downloading from a se rv e r comput e r estabiishing a secure network connection to 
said computer; and 

loading one or more malware detection files to said computer ; ff and]] 

■ ma j- war e -d e tee - t - io - n-fil -e sv 

vyherei 1 i < between sai mput d sai n ripul 
operable to block a connection between said computer and said server computer other 
than said secure network connection; 

wherein said computer is booted with a non-installed operating system read from 
aremoyable.physical.mediaj. 
computer; 

wherein network support code is loaded for said computer read from said 
eo iM physit > 



